Behavioral task
behavioral1
Sample
652d392430413d651d91342539869016_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
652d392430413d651d91342539869016_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
652d392430413d651d91342539869016_JaffaCakes118
-
Size
792KB
-
MD5
652d392430413d651d91342539869016
-
SHA1
661e36f1f3ff9cc035717e8cefdcc48ca1079eab
-
SHA256
9285ec6bcd8e5f6db61810d8b43f5ac64c69a8278485cc5b2450a0f972361dfb
-
SHA512
10675e47f9de62729521d62c6cc99ee5167dd25ee80827c2e56aaef304fde3a5cea297cd80c1843e086ddd919a8d34915a79d38b259219567b896f8d2073ceea
-
SSDEEP
12288:Bg5+1Ms1Cki3+vpjl8bHCCx1YEzNqLcLMCCdK16bGshh7Hapa2cSHmGpw7okA:K+iB3+vpjl8bHCCsTpcshlapa9GpR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 652d392430413d651d91342539869016_JaffaCakes118
Files
-
652d392430413d651d91342539869016_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE